This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
File: 11e64435-46b6-3862-bbed-e6b28cc92196.roa (raw, json)
Hash identifier: NyuS5hG7pNjE6DY7ZNe65A5S+tHZ5D5FtmUG/n6TDZQ=
Subject key identifier: E0:55:D9:60:12:33:02:62:10:79:99:72:3F:7C:7E:36:07:53:E4:BF
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584BD1065F061A6E69B9757BC900
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
Signing time: Mon 10 Nov 2025 19:24:29 +0000
ROA not before: Mon 10 Nov 2025 19:24:29 +0000
ROA not after: Sun 08 Feb 2026 19:24:29 +0000
asID: 394654
IP address blocks: 68.209.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d1:06:5f:06:1a:6e:69:b9:75:7b:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Nov 10 19:24:29 2025 GMT
Not After : Feb 8 19:24:29 2026 GMT
Subject: CN=86c48206-a441-4809-8ba5-bb8b3f5d9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:7c:ba:22:08:d5:47:6b:f6:12:d1:c0:b0:
99:1e:0b:c4:6b:e1:f5:01:c0:20:93:7a:70:bd:0e:
8e:98:61:df:66:58:fc:31:cc:5a:96:dc:0d:03:dc:
1d:d9:27:2b:a0:56:7f:03:40:e9:fe:3d:3b:38:11:
23:5a:a5:29:7a:ce:57:74:7d:83:f3:7c:e7:7a:12:
c6:be:ec:74:ed:84:e8:83:8d:d6:f1:ae:b7:03:91:
ea:ac:af:95:60:ae:28:31:08:dc:4d:d9:bb:22:18:
53:fa:30:18:74:60:3d:f0:5d:2e:ba:55:45:59:7b:
9d:9f:98:bc:93:b3:80:de:6f:50:fb:03:81:fe:9b:
52:69:f8:be:e0:e2:f1:2a:4c:1f:c2:0e:0d:d5:76:
8b:04:78:42:59:c2:15:ab:a4:4c:34:4e:bb:19:e6:
f7:ba:86:86:ac:67:d7:cf:05:92:96:0c:22:a7:dc:
a8:2d:0b:59:53:80:d5:82:43:4f:90:07:ef:66:bd:
e1:b9:b6:d0:79:4a:f5:ec:bc:59:ee:f0:3e:3e:53:
ad:6d:c3:d2:89:81:dc:8c:0a:5a:a7:13:24:18:42:
bf:eb:52:1f:81:f5:90:8c:bc:a3:27:dc:56:91:81:
e5:16:1a:73:d7:ea:a0:4f:db:93:33:77:a8:12:77:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:D9:60:12:33:02:62:10:79:99:72:3F:7C:7E:36:07:53:E4:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.209.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:55:9d:0d:22:6e:de:93:f6:bd:7f:08:59:65:db:5e:2f:19:
19:d3:65:23:21:c3:3a:34:3e:0b:5b:3f:0b:d7:5c:25:65:12:
03:ee:6a:d0:13:f3:0d:a4:f5:dd:d1:e2:d9:ca:c5:68:c9:79:
bb:34:c3:81:59:1d:58:48:0e:1f:d1:a0:14:8b:88:76:ba:40:
5c:07:71:19:c1:bc:ef:d6:a6:7b:66:25:a5:15:4f:0e:a7:24:
bc:70:da:d3:ff:3d:74:22:ed:72:2b:5d:d1:6b:59:36:0e:e3:
72:07:b9:44:1d:b0:7b:08:3e:4f:dc:21:2f:58:de:5f:a4:fc:
dd:34:63:e3:0f:84:05:b3:57:da:5a:8c:48:62:39:cf:dd:b8:
bf:0a:a5:c4:7d:38:7b:bd:87:f8:a9:4d:c2:be:a1:60:02:87:
4d:cc:15:f2:7b:39:89:8e:ab:47:4c:ef:d5:7b:c3:66:a8:bb:
8c:6c:5d:5a:44:4d:03:a1:fa:19:25:01:4a:38:f4:45:7e:09:
43:4b:6f:e7:f7:f6:51:5e:b2:ee:58:5a:56:d2:3d:b4:79:21:
21:b2:fb:bd:ad:3f:34:c6:90:2f:75:d0:55:4b:2e:ee:42:94:
ba:22:8d:67:e2:c4:03:84:01:b7:37:a6:f3:cf:43:17:3e:a6:
7b:14:2c:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRBl8GGm5puXV7yQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0
NWY1MB4XDTI1MTExMDE5MjQyOVoXDTI2MDIwODE5MjQyOVowLzEtMCsGA1UEAxMk
ODZjNDgyMDYtYTQ0MS00ODA5LThiYTUtYmI4YjNmNWQ5ZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh98uiII1Udr9hLRwLCZHgvEa+H1AcAgk3pw
vQ6OmGHfZlj8McxaltwNA9wd2ScroFZ/A0Dp/j07OBEjWqUpes5XdH2D83znehLG
vux07YTog43W8a63A5HqrK+VYK4oMQjcTdm7IhhT+jAYdGA98F0uulVFWXudn5i8
k7OA3m9Q+wOB/ptSafi+4OLxKkwfwg4N1XaLBHhCWcIVq6RMNE67Geb3uoaGrGfX
zwWSlgwip9yoLQtZU4DVgkNPkAfvZr3hubbQeUr17LxZ7vA+PlOtbcPSiYHcjApa
pxMkGEK/61IfgfWQjLyjJ9xWkYHlFhpz1+qgT9uTM3eoEnd9zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBV2WASMwJiEHmZcj98fjYHU+S/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk
ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTFlNjQ0MzUtNDZiNi0z
ODYyLWJiZWQtZTZiMjhjYzkyMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3
ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi
NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1
YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERNEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFVnQ0ibt6T9r1/CFll214vGRnTZSMhwzo0PgtbPwvXXCVlEgPuatAT
8w2k9d3R4tnKxWjJebs0w4FZHVhIDh/RoBSLiHa6QFwHcRnBvO/WpntmJaUVTw6n
JLxw2tP/PXQi7XIrXdFrWTYO43IHuUQdsHsIPk/cIS9Y3l+k/N00Y+MPhAWzV9pa
jEhiOc/duL8KpcR9OHu9h/ipTcK+oWACh03MFfJ7OYmOq0dM79V7w2aou4xsXVpE
TQOh+hklAUo49EV+CUNLb+f39lFesu5YWlbSPbR5ISGy+72tPzTGkC910FVLLu5C
lLoijWfixAOEAbc3pvPPQxc+pnsULIE=
-----END CERTIFICATE-----
Generated at Sun Nov 23 08:21:46 2025 by rpki-client